$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: jNZt0EuOIPVYlubox54CRWArtn8b7Wtf3gG2CtVqfbc= Subject key identifier: B0:2A:5C:60:DE:DC:BF:FB:96:09:AB:97:F5:71:31:BA:12:3D:3D:FA Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0196BD12846CF1627A02DD3C8CC54978CD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1559 Signing time: Sun 11 May 2025 02:00:29 +0000 Manifest this update: Sun 11 May 2025 02:00:29 +0000 Manifest next update: Mon 12 May 2025 02:00:29 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: L-AWJ4nIztFSgG66bUsPdBmarDA.roa (hash: Jz5CZKRVQCw+134+FFFDl9gJVDsq6GauK572upLA91U=) 7: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 8: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 9: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 10: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 11: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 12: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 13: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 14: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: /NPhYfnO8rY225TdMQ8fN2EffxPal5KOr2c7NUyjraY=) 16: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:12:84:6c:f1:62:7a:02:dd:3c:8c:c5:49:78:cd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: May 11 02:00:29 2025 GMT Not After : May 12 02:00:29 2025 GMT Subject: CN=b02a5c60dedcbffb9609ab97f57131ba123d3dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:e0:60:59:f1:59:75:89:6a:c2:d6:68:c8: 24:90:79:6a:9d:83:d5:c2:51:56:b8:e5:a6:75:85: 5b:ea:22:d9:6c:55:93:eb:4a:da:5a:75:f0:c4:fa: 21:26:84:7b:97:ba:b3:f5:21:f8:bf:83:02:37:20: 32:08:56:db:ee:06:a4:be:d1:ab:7e:7a:a7:27:0f: 76:c9:a1:a5:9e:53:ca:31:0e:4f:ef:53:50:d4:09: 0c:f0:c8:69:f7:61:f1:7f:60:4d:6b:57:12:77:00: 97:6d:9e:28:49:63:a7:57:8f:f5:ce:8d:3c:e8:b0: 1a:8a:d0:ec:fe:30:a4:a5:32:f1:94:17:81:b4:ad: 55:3b:4e:8a:69:09:22:95:6e:67:7a:a8:92:0b:3e: cd:fb:44:8f:5d:0f:31:b3:1b:ca:40:9a:99:cb:7e: ee:70:9a:ee:9b:dd:63:78:be:ec:0d:b5:40:d8:7a: 44:19:ea:d8:30:85:88:13:07:4f:a5:7e:1f:60:ed: f9:96:09:cc:40:b2:1c:f3:f3:8e:6d:15:f6:31:be: d1:11:1e:81:15:76:54:d0:e2:25:eb:82:02:84:b1: 03:8e:89:72:ac:c0:43:3b:cf:04:9e:63:67:a2:8b: fd:d8:94:09:04:62:16:cb:e1:6b:99:a8:d2:1a:e5: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:5C:60:DE:DC:BF:FB:96:09:AB:97:F5:71:31:BA:12:3D:3D:FA X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:77:9a:87:84:11:28:48:c4:d5:bd:39:9e:e9:d3:fd:b0:fc: bd:76:92:48:f6:88:e5:f6:83:00:26:8e:be:69:01:8d:2b:7c: cf:12:00:b5:17:20:84:2a:43:3c:a4:da:c9:57:6e:b3:24:8e: 36:5f:3f:8c:b9:f8:36:56:5b:c7:63:ee:bd:0d:48:6b:7c:a4: 7b:c3:09:d5:50:b7:26:6e:4a:5d:b1:9f:a4:d5:88:df:27:57: 9f:c6:92:bf:e4:40:93:d6:f3:00:f1:4f:47:35:94:3a:07:9c: 49:b9:7e:31:ef:e5:f9:3b:26:1a:ce:5d:b9:bf:a9:ac:92:a0: 3c:8b:0a:97:96:97:53:b7:df:65:6e:78:91:5b:20:5a:36:48: 04:61:ad:51:e9:ca:a4:75:72:19:1a:d2:f3:66:10:81:2a:6a: d2:38:30:cd:89:c1:44:11:df:3f:7c:3b:91:fd:33:3c:aa:4c: bb:cd:42:97:a6:37:fc:60:29:e3:55:95:fc:af:6e:ca:44:8f: 7a:d9:73:98:60:60:20:2c:81:de:72:5b:b2:3a:4d:e9:76:17: 75:61:f0:3f:c8:ff:ce:87:9e:da:c1:54:75:c9:a8:43:32:c2: 6f:f5:01:cd:8f:a1:b1:77:89:12:4a:c7:bf:2d:df:ee:ce:ab: 33:b3:80:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9EoRs8WJ6At08jMVJeM2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwNTExMDIwMDI5WhcNMjUwNTEyMDIwMDI5WjAzMTEwLwYDVQQD EyhiMDJhNWM2MGRlZGNiZmZiOTYwOWFiOTdmNTcxMzFiYTEyM2QzZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPgYFnxWXWJasLWaMgkkHlqnYPV wlFWuOWmdYVb6iLZbFWT60raWnXwxPohJoR7l7qz9SH4v4MCNyAyCFbb7gakvtGr fnqnJw92yaGlnlPKMQ5P71NQ1AkM8Mhp92Hxf2BNa1cSdwCXbZ4oSWOnV4/1zo08 6LAaitDs/jCkpTLxlBeBtK1VO06KaQkilW5neqiSCz7N+0SPXQ8xsxvKQJqZy37u cJrum91jeL7sDbVA2HpEGerYMIWIEwdPpX4fYO35lgnMQLIc8/OObRX2Mb7RER6B FXZU0OIl64IChLEDjolyrMBDO88EnmNnoov92JQJBGIWy+FrmajSGuV6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAqXGDe3L/7lgmrl/VxMboSPT36MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXeah4QR KEjE1b05nunT/bD8vXaSSPaI5faDACaOvmkBjSt8zxIAtRcghCpDPKTayVdusySO Nl8/jLn4NlZbx2PuvQ1Ia3yke8MJ1VC3Jm5KXbGfpNWI3ydXn8aSv+RAk9bzAPFP RzWUOgecSbl+Me/l+TsmGs5dub+prJKgPIsKl5aXU7ffZW54kVsgWjZIBGGtUenK pHVyGRrS82YQgSpq0jgwzYnBRBHfP3w7kf0zPKpMu81Cl6Y3/GAp41WV/K9uykSP etlzmGBgICyB3nJbsjpN6XYXdWHwP8j/zoee2sFUdcmoQzLCb/UBzY+hsXeJEkrH vy3f7s6rM7OAWg== -----END CERTIFICATE-----Generated at Sun May 11 03:55:39 2025 by rpki-client